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ABSTRACT 

A method and system for auditing inforaiation technology used to handle 
financial statement accounts to secure sensitive financial information against the 
exploitation of vulnerabilities and ineffective configuration standards. By working with 
the client organization, an audit team evaluates the way the client organization controls 
sensitive IT systems. The audit team is able to assess the client organization's internal 
control processed and recommend improvements. 


16 


